m1tz (@_m1tZ) profile picture

m1tz

@_m1tZ

Web Security Expert | Bug Hunter | Käferjäger | https://teapawt.org/t.co/DT86afEp4J https://teapawt.org/t.co/WzdEqXoJv9

Joined January 2019
  • Tweets110
  • Following942
  • Followers241
6Media
Photo by m1tz (@_m1tZ)Photo by m1tz (@_m1tZ)Photo by m1tz (@_m1tZ)Photo by m1tz (@_m1tZ)Photo by m1tz (@_m1tZ)Photo by m1tz (@_m1tZ)
m1tz retweeted
frycos (@frycos) profile picture
frycos@frycosSep 23
Happy announcement: My colleague and me will present a talk at hardwear.io NL 2026, "Vulnerabilities That Get Under Your Skin: Targeting the World’s Best-Selling Infusion Pumps". 100% human-brain VR 😛
Hardwear.io NL 2026 – Hardware Security Conference

Hardwear.io NL 2026 – Hardware Security Conference

Attend Hardwear.io NL 2026 for top hardware security trainings, talks, CTFs, and networking in Amsterdam this November. Register today!

hardwear.io
5
1
16
1,582
Last week, I joined a special educational #BugBounty event in Iceland, hosted by a private program and @Hacker0x01 🇮🇸 Two intense days of knowledge sharing, meeting old and new friends, exploring Reykjavík - and even spotting whales and dolphins.🤯 Grateful for this experience!
Image from Lauritz (@_lauritz_)
Image from Lauritz (@_lauritz_)
Image from Lauritz (@_lauritz_)
Image from Lauritz (@_lauritz_)
1
14
466
m1tz retweeted
zere (@j_zere) profile picture
zere
@j_zereMay 25
Just released a new write-up: "From a Sanitized Name Field to One-Click Account Takeover": zere.es/posts/self-xss-accou…
From a Sanitized Name Field to One-Click Account Takeover

From a Sanitized Name Field to One-Click Account Takeover

Some weeks ago, I was testing a mature and heavily audited application from a bug bounty program. Since I had previously found several interesting client-side vulnerabilities in that target, I...

zere.es
4
39
225
11,874
SHA Pinning Is Not Enough rosesecurity.dev/2026/03/24/…

SHA Pinning Is Not Enough

A few days ago I wrote about how the Trivy ecosystem got turned into a credential stealer. One of my takeaways was “pin by SHA.” Every supply chain security guide says it, I’ve said it, every...

rosesecurity.dev
4
2
516
Why can the ArgosDNS.io database look smaller in some cases? Because bigger subdomain counts can just mean more wildcard noise. This article explains why: argosdns.io/blog/wildcard-dn…
Domain & Attack Surface Intelligence

Domain & Attack Surface Intelligence

Search billions of domains, subdomains, and DNS records via API. Built for security teams, MSSPs, and SOC analysts.

argosdns.io
8
2
75
29,379
Some german IP (who are you :P) tried to "hack" argosdns.io using Strix Pentest Agent... it failed,ran into each protection mechanism ... so smart, so AI...
Domain & Attack Surface Intelligence

Domain & Attack Surface Intelligence

Search billions of domains, subdomains, and DNS records via API. Built for security teams, MSSPs, and SOC analysts.

argosdns.io
2
20
2,244
I finally let Claude do my pentest this week. Full 5-day engagement, zero human input. Here's what the client got: 😏 clawd.it/posts/10-replaced-b… #bugbounty #pentesting #AI #cybersecurity #infosec #claudeai
Replaced by a Goldfish

Replaced by a Goldfish

AI isn't replacing pentesters. It's replacing the people who think pentesting is a checklist. A deep dive into the hype, the money, and why Daniel Miessler's $70 trillion take doesn't hold up.

patrik.re
43
205
21
947
118,201
Thrilled to announce the start of a new chapter @codewhitesec 🙂 Thank you for the welcome package 🙃
Image from Tobi Weißhaar (@_kun_19)
5
1
37
1,697
You like technical deep dives into binary exploitation and crazy heap wizardry? Then you'll like our blog post by @0xor_solo about unauth'ed RCE in NetSupport Manager aka CVE-2025-34164 & CVE-2025-34165 code-white.com/blog/2026-01-…
CODE WHITE | Unauthenticated RCE in NetSupport Manager - A Technical Deep Dive

CODE WHITE | Unauthenticated RCE in NetSupport Manager - A Technical Deep Dive

NetSupport Manager is a remote control and support software that we find surprisingly often utilized in sensitive *Operational Technology (OT)* environments, such as production plant networks....

code-white.com
52
3
137
18,665
Latest ≠ Greatest? A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS from our very own @mwulftange who loves converting n-days to 0-days code-white.com/blog/wsus-cve…
CODE WHITE | A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS

CODE WHITE | A Retrospective Analysis of CVE-2025-59287 in Microsoft WSUS

How the n-day research for a suspected vulnerability in Microsoft WSUS (CVE-2025-59287) led to the surprising discovery of a new `SoapFormatter` vulnerability added by the Patch Tuesday updates of...

code-white.com
1
51
1
97
15,564
CVE-2025-55315, a 9.9 HTTP smuggling vulnerability in dotnet Kestrel webserver disclosed this week, caught my attention this morning due to lack of information, so I put together a very limited analysis of it. turb0.one/pages/Abbreviated_… More to be done here for those interested!
1
22
123
11,313
Playing with HTTP/2 CONNECT blog.flomb.net/posts/http2co…

Playing with HTTP/2 CONNECT

In HTTP/1, the CONNECT method instructs a proxy to establish a TCP tunnel to a requested target. Once the tunnel is up, the proxy blindly forwards raw traffic in both directions. This mechanism is...

blog.flomb.net
5
7
1,505
Ten days left. The warm-up fades. Maultaschen were soft. Bean Beats were dark and burnt. But the beats of #ULMageddon will be brutal! #applyIfYouCan
Image from CODE WHITE GmbH (@codewhitesec)
14
1
27
4,712
We've added a new demo to NewRemotingTricks that makes deploying a MarshalByRefObject (e.g., WebClient) even easier: System.Lazy<T> creates an instance of T on serialization, which is probably more likely to be allowed than a XAML gadget getting through. github.com/codewhitesec/NewR…
GitHub - codewhitesec/NewRemotingTricks: New exploitation tricks for hardened .NET Remoting servers

GitHub - codewhitesec/NewRemotingTricks: New exploitation tricks for hardened .NET Remoting servers

New exploitation tricks for hardened .NET Remoting servers - codewhitesec/NewRemotingTricks

github.com
1
31
1
89
7,646
We have reproduced "ToolShell", the unauthenticated exploit chain for CVE-2025-49706 + CVE-2025-49704 used by @_l0gg to pop SharePoint at #Pwn2Own Berlin 2025, it's really just one request! Kudos to @mwulftange
Image from CODE WHITE GmbH (@codewhitesec)
8
159
9
630
110,592
First experience with the @SamsungMobile Bug Bounty Program. Takes a looong time to get rewarded and the reward was not as expected…but anyways what stays is a CVE for Samsung (Browser App) 😅 Thanks @_m1tZ for the collab!#bugBounty #hacking nvd.nist.gov/vuln/detail/CVE…
1
20
1,522
Yes, we're beating a dead horse. But that horse still runs in corporate networks - and quietly gives attackers the keys to the kingdom. We're publishing what’s long been exploitable. Time to talk about it. #DSM #Ivanti code-white.com/blog/ivanti-d…

CODE WHITE | Analyzing the Attack Surface of Ivanti's DSM

Ivanti's Desktop & Server Management (DSM) product is an old acquaintance that we have encountered in numerous red team and internal assessments. The main purpose of the product is the centralized...

code-white.com
49
4
106
16,466
My blog post on some vulns in GFI MailEssentials frycos.github.io/vulns4free/…

GFI MailEssentials - Yet Another .NET Target

What is this product GFI MailEssentials all about? We’re living the future, right? So let’s ask the GFI AI.

frycos.github.io
1
35
85
8,490
Our crew members @mwulftange & @frycos discovered & responsibly disclosed several new RCE gadgets that bypass #Veeam's blacklist for CVE-2024-40711 & CVE-2025-23120 as well as further entry points following @SinSinology & @chudyPB's blog. Don’t blacklist, replace BinaryFormatter.
25
3
85
23,066
Ever wondered how Kurts Maultaschenfabrikle got hacked in 2023? The full story, all technical details, out now ;-) apply-if-you-can.com/walkthr…
CODE WHITE - Applicants Challenge

CODE WHITE - Applicants Challenge

Applicants Challenge! Face real-world vulns, earn trophies, First Bloods & epic swag!

apply-if-you-can.com
1
21
61
5,417
Load more